Read the docs

vcita

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

vcita records in CISA KEV

No vcita vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Online Booking & Scheduling Calendar 19 records MEDIUM Crm And Lead Management By Vcita 4 records LOW Online Payments - Get Paid With Paypal, Square & Stripe 3 records LOW Contact Form And Calls To Action By Vcita 2 records LOW Contact Form Builder By Vcita 2 records LOW Event Registration Calendar By Vcita 2 records LOW

Records

4 records in Crm And Lead Management By Vcita · all components

TI-2023-02258 CVE-2023-2404 · GHSA-w96h-896h-cpjm

CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 2.6.2 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00596 Published 2023-06-03 No fix listed CWE-79
TI-2024-12741 CVE-2024-13702 · GHSA-fw8w-x93f-2wfh

CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' and 'vCitaSchedulingCalendar' shortcodes in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00214 Published 2025-03-26 No fix listed CWE-79
TI-2024-12742 CVE-2024-13703 · GHSA-c9cf-2qq3-hq8v

CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle

Priority LOW 20

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae() function in all versions up to, and including,…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00299 Published 2025-03-13 No fix listed CWE-862
Open these records in search →